timing safe equals, but for the browser
npm install timing-safe-equaltiming-safe-equal
===
provides a browserfiable crypto.timingSafeEquals that, when used in the browser, gives a shim and when used in node, gives you the native one if available, and if not the shim.